refactoring to use constants
modify valid duration in uAuth